Search Images Maps Play YouTube News Gmail Drive More »
Sign in
Screen reader users: click this link for accessible mode. Accessible mode has the same essential features but works better with your reader.

Patents

  1. Advanced Patent Search
Publication numberUS5758343 A
Publication typeGrant
Application numberUS 08/569,544
Publication dateMay 26, 1998
Filing dateDec 8, 1995
Priority dateDec 8, 1995
Fee statusPaid
Publication number08569544, 569544, US 5758343 A, US 5758343A, US-A-5758343, US5758343 A, US5758343A
InventorsMary Frances Vigil, Tak Fai Sze, Gary Seller, Steven Lee Eggerman
Original AssigneeNcr Corporation
Export CitationBiBTeX, EndNote, RefMan
External Links: USPTO, USPTO Assignment, Espacenet
Apparatus and method for integrating multiple delegate directory service agents
US 5758343 A
Abstract
A method and system for handling a highly scalable, X.500 directory solution is described. Management of information within the X.500 directory is divided among separate delegate directory service agent processes running on a single server. The server may have multiple processors implementing the separate delegate directory service agent processes. A user interface for managing such a system is also described.
Images(8)
Previous page
Next page
Claims(18)
What is claimed is:
1. A directory service system for accessing information stored in an X.500 directory information tree, comprising:
a first directory service agent implemented on a server and coupled to receive a query from a directory user agent, the first directory service agent being provided to manage information in a root of the directory information tree;
a plurality of delegate directory service agents, implemented on the server and coupled to the first directory service agent, respectively managing a corresponding portion of the directory information tree beneath the root of the directory information tree, each delegate directory service agent receiving a chained request from the first directory service agent generated in response to the query from the directory user agent, a response to the chained request from said each delegate directory service agent being provided to the first directory service agent; and
a graphical user interface facilitating configuration of the delegate directory service agents, including a delegate directory service agent installation window including facilities for defining an alias entry for a new delegate service agent, the alias entry to be managed by the first directory service agent and for defining a delegate subtree distinguished name for a delegate entry beneath the alias entry in the directory information tree, the delegate entry to be managed by the new delegate service agent.
2. A system as recited in claim 1, wherein the plurality of delegate directory service agents are implemented using a plurality of corresponding parallel processing units provided within a single server.
3. A system as recited in claim 2, wherein the server includes a main memory and wherein information managed by the first directory service agent resides in the main memory.
4. A system as recited in claim 1, wherein the first directory service agent comprises a QUIPU directory service agent.
5. A directory service system, comprising:
at least one directory user agent coupled to provide user access to the directory service; and
a server coupled to the at least one directory user agent to provide access to a directory information tree in response to a user request for information, the server including:
a main memory;
a first directory service agent managing a root of the directory information tree in the main memory;
a plurality of delegate directory service agents respectively managing a branch of the directory information tree below the root of the directory information tree, each receiving a chained request from the first directory service agent in response to the user request for information to retrieve the information; and
a graphical user interface facilitating configuration of the delegate directory service agents including a delegate directory service agent installation window including facilities for defining an alias entry for a new delegate service agent, the alias entry to be managed by the first directory service agent and for defining a delegate subtree distinguished name for a delegate entry beneath the alias entry in the directory information tree, the delegate entry to be managed by the new delegate service agent.
6. A system as recited in claim 5, wherein the server comprises a plurality of parallel processing units, each processing task associated with a corresponding one of the delegate directory service agents.
7. A system as recited in claim 5, wherein the at least one directory user agent includes a remote directory service agent.
8. A system as recited in claim 5, wherein the at least one directory user agent includes a directory user agent application coupled to the server via a directory access protocol resident in the server.
9. A system as recited in claim 5, wherein the server further includes a directory shell interface to the directory.
10. A directory service system for accessing information stored in an X.500 directory information tree, comprising:
a first directory service agent implemented on a server and coupled to receive a query from a directory user agent, the first directory service agent being provided to manage information in a root of the directory information tree;
a plurality of delegate directory service agents, implemented on the server and coupled to the first directory service agent, respectively managing a corresponding portion of the directory information tree beneath the root of the directory information tree, each delegate directory service agent receiving a chained request from the first directory service agent generated in response to the query from the directory user agent, a response to the chained request from said each delegate directory service agent being provided to the first directory service agent; and
a graphical user interface facilitating configuration of the delegate directory service agents, including a process control window including facilities for displaying in process status for the delegate directory service agents, and starting and stopping the operation of one or more of the delegate directory service agents.
11. A system as recited in claim 10, wherein the plurality of delegate directory service agents are implemented using a plurality of corresponding parallel processing units provided within a single server.
12. A system as recited in claim 11, wherein the server includes a main memory and wherein information managed by the first directory service agent resides in the main memory.
13. A system as recited in claim 10, wherein the first directory service agent comprises a QUIPU directory service agent.
14. A directory service system, comprising:
at least one directory user agent coupled to provide user access to the directory service; and
a server coupled to the at least one directory user agent to provide access to a directory information tree in response to a user request for information, the server including:
a main memory;
a first directory service agent managing a root of the directory information tree in the in memory;
a plurality of delegate directory service agents respectively managing a branch of the directory information tree below the root of the directory information tree, each receiving a chained request from the first directory service agent in response to the user request for information to retrieve the information; and
a graphical user interface facilitating configuration of the delegate directory service agents including a process control window including facilities for displaying process status for the delegate directory service agents, and selectively starting and stopping the operation of one or more of the delegate directory service agents.
15. A system as recited in claim 14, wherein the server comprises a plurality of parallel processing units, each processing task associated with a corresponding one of the delegate directory service agents.
16. A system as recited in claim 14, wherein the at least one directory user agent includes a remote directory service agent.
17. A system as recited in claim 14, wherein the at least one directory user agent includes a directory user agent application coupled to the server via a directory access protocol resident in the server.
18. A system as recited in claim 14, wherein the server further includes a directory shell interface to the directory.
Description
BACKGROUND OF INVENTION

1. Field of the Invention

The present invention relates generally to a highly scalable directory, and in particular to such a directory using multiple integrated delegate directory service agents.

2. Description of Related Art

Various directory systems have been used conventionally to organize electronically stored information, especially to facilitate subsequent retrieval by a user. The X.500 directory model has been implemented in various directory systems. X.500 model-based directory systems are typically used to support querying by human users. Such systems allow users to find information such as telephone numbers, addresses and other details of individuals and organizations in a convenient structure.

X.500 directories are characterized by their ability to efficiently handle large, highly distributed information. For example, a number of server based directory service agents (DSAs) may be connected to form a global X.500 directory. The individual directory service agents are maintained by different organizations throughout the world and are interconnected via a series of communication links.

An X.500 directory is often times distributed on an organizational basis. The directory is organized in a hierarchial structure having entries arranged in the shape of a tree, commonly referred to as a directory information tree (DIT). An exemplary directory information tree is illustrated in FIG. 13. In the illustrated example, entries for countries 11 and 12, and organizations of national significance 21, 22, and 23, appear towards the root 10 of the tree. Entries for individuals 41, 42, and 43 and small organizations 31, 32, and 33 appear towards the leaves the tree. An entry which does not have any further entries depending therefrom is commonly referred to as a leaf entry.

Every entry in the directory information tree has a distinguished name that unambiguously identifies the particular entry. The distinguished name of a particular entry is derived from the structure of the directory information tree by combining the relative distinguished names from all entries higher up the tree. For example, entry 41 of the directory information tree illustrated in FIG. 13, has a distinguished name of the form:

cn=Timothy A. House, ou=Faculty and Staff, o=University of Michigan, c=U.S.

Information in the directory information tree is typically accessed using a directory user agent (DUA) connected to the directory service. The directory user agent assists a user in formulating queries, provides the required protocol for the queries and passes them to the directory to retrieve the information. The retrieved information is typically displayed to the user by the directory user agent.

In a conventional X.500 directory system, the OSI standards (Standard Reference Model for Open Systems Interconnection) do not define the directory user agent, but rather establish protocols that should be used by a directory user agent when communicating with such a directory. Typically, a directory user agent communicates with the directory using a directory access protocol (DAP) or another protocol fulfilling the same function such as the light directory access protocol (LDAP).

Accesses to the information within the directory information tree via a request from a directory user agent are typically handled by the directory service agent managing the directory information tree. The directory service agent may directly handle the request itself or may alteratively inquire of another directory service agent using the directory system protocol. The process of directing an inquiry to another directory service agent is generally referred to as chaining (i.e., the request is chained to another directory service agent).

One convenient form of a directory service agent is the QUIPU directory service agent which provides an environment for modifying the standardized directory services. A detailed description of an X.500 OSI directory service and QUIPU directory service agent technology is provided in ISODE Volume 5: Administrator's Guide: Directory Services (May 1994 ed.). While the strength of a QUIPU directory service agent includes its high distributivity, it encounters difficulties in handling large centralized directories. Thus, in order to migrate a large, centralized directory to a QUIPU-based X.500 directory, the legacy directory information needs to be split and disseminated to multiple directory service agent servers. Such an approach is expensive, both in terms of hardware and administrative resources. Moreover, such an approach does not solve the need to administer and store large amounts of non-distributed information.

A conventional QUIPU directory service agent readily supports directories having 40,000 entries using a single local directory service agent. In this approach, all directory information is loaded into the main memory of the directory service agent server when the directory service agent is started. This approach produces catastrophic memory errors when the number of entries in the directory exceeds 50,000. Thus, a conventional QUIPU directory service agent cannot be used for large centralized (non-distributed) directories.

In order to increase the capacity of QUIPU technology, a specialized delegate directory service agent may be implemented in connection with a QUIPU directory service agent. In this approach, a disk-based (rather than main memory-based) single delegate directory service agent process is installed on the server which implements the memory-based directory service agent. The memory-based directory service agent is constructed as a specialized adjacent directory service agent to which requests may be chained as needed. In this approach, when a request is chained to the delegate directory service agent, the delegate directory service agent accesses indexed files, which are created during a preprocessing stage, to serve the chained request. This use of a delegate directory service agent is described more fully in the above-referenced ISODE publication.

With the above approach, the use of a delegate directory service agent provides a successful implementation of a QUIPU implemented X.500 directory having approximately 100,000 entries. However, this approach also fails to perform adequately as the number of entries in the directory is increased to approximately 150,000. Thus, while the delegate directory service agent technology has doubled the capacity of the original QUIPU architecture, it still has a limited capacity (i.e., does not have a scalability sufficient to meet the needs of numerous enterprises having a need for larger localized directories). Thus, a large corporation having 300,000 employees could not use a single server to implement a centralized directory. Thus, in such systems, the directory information still must be split and disseminated onto multiple servers increasing the cost of implementing the directory and limiting the ability to have a large, non-distributed directory.

SUMMARY OF THE INVENTION

To overcome the limitations in the prior art described above, and to overcome other limitations that will become apparent upon reading and understanding the present specification, the present invention discloses a method and apparatus for providing an improved directory service which is highly scalable and which is able to handle large non-distributed directories.

The present invention may be implemented in the form of a directory service system for accessing information stored in an X.500 directory information tree. The system includes a first directory service agent coupled to receive a query from a directory user agent. The first directory service agent manages information in the root of the directory information tree. The system also includes multiple delegate directory service agents coupled to the first directory service agent. The delegate directory service agents each manage corresponding portions of the directory information tree beneath the root. In response to the query from the directory user agent, a request is chained to each of the delegate directory service agents. The response to the chained request from each of the delegate directory service agents is provided to the first directory service agent.

In one embodiment, each of the delegate directory service agents are implemented in parallel on corresponding parallel processors incorporated in a single server.

An object of the present invention is to provide a highly scalable directory service. Another object of the present invention is to provide a directory service which is able to handle large non-distributed directories. Still another object of the present invention is to provide an improved directory service using multiple delegate directory service agents. Another object of the invention is to provide a directory service where multiple delegate directory service agents are implemented on separate processors operating in parallel. Yet another object of the present invention is to provide a user interface which facilitates setup and management of the improved directory service.

BRIEF DESCRIPTION OF THE DRAWINGS

The invention may be more completely understood in consideration of the following detailed description of various embodiments of the invention in connection with the accompanying drawings, in which:

FIG. 1 illustrates a directory system in accordance with an embodiment of the invention;

FIG. 2 illustrates a directory information tree in accordance with an embodiment of the present invention;

FIG. 3 illustrates a graphical user interface window in accordance with an embodiment of the present invention;

FIG. 4 illustrates another graphical user interface window in accordance with an embodiment of the present invention;

FIG. 5 illustrates still another graphical user interface window in accordance with an embodiment of the present invention;

FIG. 6 illustrates a further graphical user interface window in accordance with an embodiment of the present invention;

FIG. 7 illustrates another graphical user interface window in accordance with an embodiment of the present invention;

FIG. 8 also illustrates a graphical user interface window in accordance with an embodiment of the present invention;

FIG. 9 illustrates another graphical user interface window in accordance with an embodiment of the present invention;

FIG. 10 illustrates still another graphical user interface window in accordance with an embodiment of the present invention;

FIG. 11 illustrates another graphical user interface window in accordance with an embodiment of the present invention;

FIG. 12 illustrates a further graphical user interface window in accordance with an embodiment of the present invention;

FIG. 13 illustrates a conventional directory information tree.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

In the following description of various embodiments, reference is made to the accompanying drawings which form a part hereof, and in which is shown by way of illustration specific embodiments in which the invention may be practiced. It is to be understood that other embodiments may be utilized and structural changes may be made without departing from the scope of the present invention.

FIG. 1 illustrates an exemplary embodiment of a directory service system. In accordance with this embodiment, a high degree of scalability is provided for a directory system. The system illustrated may be used to support a large, centralized X.500 directory. As illustrated in FIG. 1, management of information organized in an X.500 directory information tree is divided between a QUIPU directory service agent 100 and multiple delegate directory service agents 101, 102, 103, and 104, all of which are implemented in a server 107.

The QUIPU directory service agent 100 loads all of the information which it handles into the main memory of the server 107 when the directory service process is started. Information to be handled by the delegate directory service agents 101-104 may be stored, for example, in UNIX db formatted index files in a disk memory. The delegate directory service agents 101-104 read information from the UNIX db formatted index files as needed to service directory requests.

The QUIPU delegate service agent process 100 is defined in the illustrated example as a level one directory service agent. As such, the QUIPU directory service agent 100 is responsible for storing and managing information at the top (near the root) of the X.500 directory information tree. The lower branches of the directory information tree are maintained by the various delegate directory service agents 101-104. The QUIPU directory service agent 100 receives all directory requests initiated by a directory user agent and automatically chains the requests to each of the delegate directory service agents 101-104.

FIG. 1 also illustrates various directory user agents which may be used to request information from the directory service implemented on server 107. The directory user agents include a directory interface shell (DISH) application 106, a light directory access protocol (LDAP) daemon process 105 and a remote directory service agent server 110.

The DISH interface 106 provides server-based access to the directory and provides a powerful interface onto the directory to give a user access to the full directory access protocol. Such an interface is typically used to provide system administrators access to the system.

The LDAP daemon process 105 may be used to service directory requests originating from directory user agent (DUA) applications such as DUA application 108. Such a directory user agent application 108 typically resides in a client 109 connected to the directory via a local area network (LAN). The directory may also be accessed by a remotely located conventional directory service agent server 110. Communication with the conventional remote directory service agent server 110 is implemented using standard directory access protocols for communication between conventionally distributed directory service agent servers.

In operation, when a query is received by the QUIPU directory service agent 100, the request is chained to each delegate directory service agent 101-104 asynchronously. As the responses from the various delegate directory service agents 101-104 are received by the QUIPU directory service agent 100, they are combined to form a complete response to the user's query. The concatenated result is sent to the requester (i.e., to the DISH process 106 for display on the local server 107, to the LDAP daemon process 105 which provides the results to the DUA application 108, or to the remote directory service agent 110).

It is noted that there are no fixed limits to the number of delegate directory service agents 100-104 which can be implemented using the configuration of FIG. 1. The practical limit is the amount of information which can be handled by the host processor of server 107. In order to provide improved performance and nearly unlimited scalability, the server 107 may be implemented using a hardware platform incorporating multiple parallel processors. For ideal performance, each processor in the server 107 supports a process of one of the delegate directory service agents 101-104. For example, the S/3000 AT&T Server System, which is a multi-processing platform, can be used as the server 107. Such a system could support a very large number of delegate directory service agent processes and provide nearly unlimited directory scalability.

In the above example, multiple delegate directory service agents are provided in order to increase the number of entries which can be handled by a single server-based directory. The principles described can also be used to improve performance of a directory service of any size. For example, the performance of a relatively small directory may be improved by implementing the directory using multiple delegate directory service agents to handle relatively small portions of the directory. Each directory service agent process would be respectively executed on one of the multiple parallel processors.

FIG. 2 illustrates an exemplary directory information tree which supports the use of multiple delegate directory service agent processes. As depicted in FIG. 2, the root 200 of the directory and the information contained in this portion of the directory information tree are managed by the QUIPU directory service agent process 201. The directory is automatically configured with the distinguished name "c=<country name>, o=<organization name>" where <country name> and <organization name> are provided by the administrator. Below the root 200, organizational unit non-leaf entries 202, 203, and 204 are automatically created for each delegate directory service agent specified by the administrator. These non-leaf entries 202, 203, and 204 define the delegate directory service agent processes and are managed by the QUIPU directory service agent 201.

Below the organizational unit nodes 202, 203, and 204, the administrator may create directory information tree branches 205, 206, and 207 that are managed by the specific delegate directory service agent processes 208, 209, and 210, respectively. In this manner, an administrator may efficiently divide a large localized directory into the multiple delegate directory service agent processes in order to efficiently handle the entries on a single server.

The illustrated system, may be administrated and implemented using standard open directory systems technologies with modifications to allow the administrator to set up and manage the multiple delegate directory service agents. For example, the AT&T open directory system, as described in "Open Directory Administrator Guide" D1-4765-A (July 1995), may be modified to provide administrative management utilities designed to facilitate the use of multiple delegate directory service agents.

FIGS. 3-12 depict an exemplary interface which may be incorporated into a system such as the AT&T open directory system to assist management of a directory implemented using multiple delegate directory service agents. The example also identifies the general types of tasks which would be carried out to set up a directory using multiple delegate directory service agents. The graphical user interface allows a directory administrator to define the multi-processing configuration in an intuitive manner without an understanding of the underlying configuration requirements of the QUIPU technologies used.

A first menu, as illustrated in FIG. 3, is displayed when the administration utility is invoked. The "Install" 300 and "GDA" 301 choices allow the administrator to add an organizational unit non-leaf entry to the directory information tree to define a delegate directory service agent. The "Deinstall" 302 choice removes the specified delegate directory service agent process and the associated branch of the directory information tree from the directory.

When the "Install" 300 and the "GDA" 301 choices are made to add a delegate directory service agent process to the configuration, the dialog box illustrated in FIG. 4 is presented. The "GDA Alias" 400, the distinguished name "DN" of the delegate subtree 404, and "Password" 401 can be entered directly into the input fields within this box. The "Indexed Attributes" button 402 and the "Bind Information" tree 403 can be used to display additional dialog boxes for specifying other configuration information. It is noted that an alias entry, such as the GDA alias 400, is an entry in the directory information tree which has its own distinguished name, but only points to another entry and does not hold full information for the entry.

Depressing the "Indexed Attributes" button 402, displays the dialog box shown in FIG. 5. New directory attributes can be added to the list of the index attributes, by typing the attribute name in the "Add Item" field 501 and depressing the "Add" button 502. As attributes are added to the list, they are displayed in the "Indexed Attributes" window 500. Attributes can be deleted from the index list by selecting the attribute name from the "Indexed Attributes" window 500 and depressing the "Delete" button 503.

Additional configuration options are available through the "Operations" option of the main administrative menu as shown in FIG. 6. Depressing the operations menu option 600 results in a drop down menu with additional choices. The "Tailor" option 601 allows the administrator to choose configuration options for the QUIPU directory service agent 602 or a delegate directory service agent process 603. Specifying the GDA option 603 causes a separate menu to be displayed as shown in FIG. 7. Menu screen 700 allows the administrator to choose which delegate directory service agent configuration to tailor. The alias names of all installed delegate directory service agent processes are listed in the GDA's window 701. To choose a specified delegate directory service agent, the administrator highlights the appropriate alias name with the GDA window 701 and depresses the "OK" button 702.

The delegate directory service agent configuration tailor dialog box is shown in FIG. 8. The delegate directory service agent alias name 809 is displayed on the top of the screen. The distinguished name of the non-leaf node representing the delegate directory service agent 800 is also shown. Configurable size limitations can be set by entering values into three input fields 801, 802, and 803 within the dialog box. Additional configuration parameters can be set by depressing the "Directory Service Agent Address" button 804, the "Manager" button 805, and the "Logs" button 806. To save all the entered information the "OK" button 807 is depressed.

The dialog box shown in FIG. 9, is displayed as a result of choosing the "Directory Service Agent Address" button 804. A T-selector can be specified in the first field 900. A hexadecimal value can be entered by depressing the "HEX" button 901. For TCP/IP (Transmission Control Protocol/Internet Protocol) configurations the name or address and a part number can be added in the input fields 902 and 903 on the second line of the dialog box. An OSI address is entered into the "NSAP" input field 904. Fields 905 and 906 are also provided to configured for X.25 addressing (i.e., the CCITT recommendation entitled "Interface between Data Terminal Equipment and Data Circuit Terminating Equipment for Terminals Operating in the Packet Mode and Connected to Public Data Networks by Dedicated Circuit"). APS (Asynchronous Protocol Specification) configuration information, specified in the "Name" 907 and the "Phone Number" 908 fields, are not applicable to delegate directory service agent configuration. Information is saved by depressing the "OK" button 909.

Selecting the "Manager" button 805 from the "GDA Tailor" dialog box 808, results in the screen depicted in FIG. 10. The dialog box is used to specify which managers are granted special privileges to access the delegate directory information subtree. Manager names are entered in the "Add Item" input field 1002. The "Add" button 1003 is used to save the new item. Existing items are displayed in the "GDA Manager" window 1001. An item can be deleted by highlighting it in the "GDA Manager" window 1001 and depressing the "Delete" button 1004.

Selecting the "Logs" button 806 from the GDA tailor dialog box 808 causes the dialog box shown in FIG. 11 to be displayed. Controls are provided for the two separate logs maintained by the delegate directory service agent. The delegate directory service agent protocol trace options are displayed on the left hand of this screen 1101, while the statistic log options are displayed on the right 1102. The type of logging can be toggled by depressing the appropriate "Exceptions" buttons 1103 and 1105, "Notice" buttons 1104 and 1106, or "Fatal" buttons 1110, 1111. The maximum size of the log files can be specified in the "Log Size" fields 1107 and 1108. Log settings can be set to default values using the "Reset" button 1112. To save the log settings, the "OK" button 1109 is depressed.

The interface further facilitates administration by providing user interfaces to manage the method and system. Interfaces to start, stop and query process status are displayed by specifying the "Process Control" option 605 of the main directory administration menu 604 illustrated in FIG. 6. The "Process Control" dialog box 1200 is depicted in FIG. 12. The various directory service agent processes configured are displayed in the "Process/Status"window 1201. The administrator can specify if this screen 1200 should be automatically updated by toggling the "Auto-Update" button 1202. The duration between updates is specified in the corresponding input field 1203. An additional "LDAP Status" toggle button 1204 is used to specify whether status of the LDAP daemon (element 105, FIG. 5) should be displayed in the "Process/Status" window 1201. The administrator specifies whether the QUIPU directory service agent and delegate directory service agent processes should be started when the operating system is rebooted by toggling the "Auto Start" button 1205. A particular process may be started or stopped by depressing the "Start" button 1206 and the "Stop" button 1207, respectively.

The foregoing description of various embodiments of the invention has been presented for the purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise form disclosed. Many modifications and variations are possible in light of the above teaching. It is intended that the scope of the invention be limited not by this detailed description, but rather by the claims appended hereto.

Patent Citations
Cited PatentFiling datePublication dateApplicantTitle
US5678045 *Dec 6, 1993Oct 14, 1997Digital Equipment CorporationMethod and apparatus for multiscript access to entries in a directory
Referenced by
Citing PatentFiling datePublication dateApplicantTitle
US6061448 *Apr 1, 1997May 9, 2000Tumbleweed Communications Corp.Method and system for dynamic server document encryption
US6061686 *Jun 26, 1997May 9, 2000Digital Equipment CorporationUpdating a copy of a remote document stored in a local computer system
US6067559 *Apr 23, 1998May 23, 2000Microsoft CorporationServer architecture for segregation of dynamic content generation applications into separate process spaces
US6119137 *Jan 30, 1997Sep 12, 2000Tumbleweed Communications Corp.Distributed dynamic document conversion server
US6151675 *Jul 23, 1998Nov 21, 2000Tumbleweed Software CorporationMethod and apparatus for effecting secure document format conversion
US6192362 *Dec 15, 1997Feb 20, 2001International Business Machines CorporationSystem and method for creating a search form for accessing directory information
US6192407 *Apr 4, 1997Feb 20, 2001Tumbleweed Communications Corp.Private, trackable URLs for directed document delivery
US6195666Dec 15, 1997Feb 27, 2001International Business Machines CorporationWeb interface and method for displaying directory information
US6208986 *Dec 15, 1997Mar 27, 2001International Business Machines CorporationWeb interface and method for accessing and displaying directory information
US6260039 *Dec 15, 1997Jul 10, 2001International Business Machines CorporationWeb interface and method for accessing directory information
US6377948 *Sep 16, 1998Apr 23, 2002Hitachi, Ltd.Directory access method
US6377950 *Oct 9, 1998Apr 23, 2002Mitel CorporationIntegrated directory services
US6385655Oct 2, 1997May 7, 2002Tumbleweed Communications Corp.Method and apparatus for delivering documents over an electronic network
US6484177Jan 13, 2000Nov 19, 2002International Business Machines CorporationData management interoperability methods for heterogeneous directory structures
US6487599Jul 14, 1999Nov 26, 2002Tumbleweed Communications Corp.Electronic document delivery system in which notification of said electronic document is sent a recipient thereof
US6502191Feb 14, 1997Dec 31, 2002Tumbleweed Communications Corp.Method and system for binary data firewall delivery
US6553368 *Mar 3, 1998Apr 22, 2003Sun Microsystems, Inc.Network directory access mechanism
US6647393 *May 2, 1997Nov 11, 2003Mangosoft CorporationDynamic directory service
US6651166Apr 9, 1998Nov 18, 2003Tumbleweed Software Corp.Sender driven certification enrollment system
US6941467Mar 8, 2002Sep 6, 2005Ciphertrust, Inc.Systems and methods for adaptive message interrogation through multiple queues
US7016945 *Apr 27, 2001Mar 21, 2006Sun Microsystems, Inc.Entry distribution in a directory server
US7039041Mar 15, 2002May 2, 2006Robohm Kurt WOperational support system for telecommunication services
US7043480Mar 15, 2002May 9, 2006Mci, Inc.Systems and methods for communicating from an integration platform to a lightweight directory access protocol based database
US7047417Mar 15, 2002May 16, 2006Leskuski Walter JSystems and methods for accessing reporting services
US7054866Mar 15, 2002May 30, 2006Mci, Inc.Systems and methods for communicating from an integration platform to a provisioning server
US7058696Nov 1, 2000Jun 6, 2006Mangosoft CorporationInternet-based shared file service with native PC client access and semantics
US7089590Sep 2, 2005Aug 8, 2006Ciphertrust, Inc.Systems and methods for adaptive message interrogation through multiple queues
US7096498Feb 7, 2003Aug 22, 2006Cipher Trust, Inc.Systems and methods for message threat management
US7120675 *Sep 26, 2000Oct 10, 2006Microsoft CorporationInformation location service
US7124438Mar 8, 2002Oct 17, 2006Ciphertrust, Inc.Systems and methods for anomaly detection in patterns of monitored communications
US7136903Nov 1, 2000Nov 14, 2006Mangosoft Intellectual Property, Inc.Internet-based shared file service with native PC client access and semantics and distributed access control
US7200602Feb 7, 2003Apr 3, 2007International Business Machines CorporationData set comparison and net change processing
US7213260Feb 24, 2003May 1, 2007Secure Computing CorporationSystems and methods for upstream threat pushback
US7225466Mar 24, 2006May 29, 2007Secure Computing CorporationSystems and methods for message threat management
US7458098Mar 8, 2002Nov 25, 2008Secure Computing CorporationSystems and methods for enhancing electronic communication security
US7519994Jul 11, 2006Apr 14, 2009Secure Computing CorporationSystems and methods for adaptive message interrogation through multiple queues
US7548989Jul 1, 2003Jun 16, 2009International Business Machines CorporationMethod and system for maintaining consistency during multi-threaded processing of LDIF data
US7693947Jun 9, 2006Apr 6, 2010Mcafee, Inc.Systems and methods for graphically displaying messaging traffic
US7694128Mar 6, 2003Apr 6, 2010Mcafee, Inc.Systems and methods for secure communication delivery
US7702919Dec 31, 2003Apr 20, 2010International Business Machines CorporationAuthorized anonymous authentication
US7779156Jan 24, 2007Aug 17, 2010Mcafee, Inc.Reputation based load balancing
US7779466Jul 11, 2006Aug 17, 2010Mcafee, Inc.Systems and methods for anomaly detection in patterns of monitored communications
US7870203Jun 9, 2006Jan 11, 2011Mcafee, Inc.Methods and systems for exposing messaging reputation to an end user
US7900052Nov 6, 2003Mar 1, 2011International Business Machines CorporationConfidential data sharing and anonymous entity resolution
US7903549May 15, 2006Mar 8, 2011Secure Computing CorporationContent-based policy compliance systems and methods
US7937480Jan 24, 2007May 3, 2011Mcafee, Inc.Aggregation of reputation data
US7949716Jan 24, 2007May 24, 2011Mcafee, Inc.Correlation and analysis of entity attributes
US7962757Mar 24, 2004Jun 14, 2011International Business Machines CorporationSecure coordinate identification method, system and program
US8042149May 29, 2007Oct 18, 2011Mcafee, Inc.Systems and methods for message threat management
US8042181Jul 12, 2006Oct 18, 2011Mcafee, Inc.Systems and methods for message threat management
US8045458Nov 8, 2007Oct 25, 2011Mcafee, Inc.Prioritizing network traffic
US8069481Jul 12, 2006Nov 29, 2011Mcafee, Inc.Systems and methods for message threat management
US8117179 *Feb 25, 2009Feb 14, 2012Oracle International CorporationMethod and apparatus for presenting, searching, and viewing directories
US8132250Jul 1, 2005Mar 6, 2012Mcafee, Inc.Message profiling systems and methods
US8160975Jan 25, 2008Apr 17, 2012Mcafee, Inc.Granular support vector machine with random granularity
US8179798Jan 24, 2007May 15, 2012Mcafee, Inc.Reputation based connection throttling
US8185930Nov 6, 2007May 22, 2012Mcafee, Inc.Adjusting filter or classification control settings
US8195738Mar 15, 2002Jun 5, 2012Verizon Business Global LlcSystems and methods for communicating from an integration platform to a profile management server
US8204831Nov 13, 2006Jun 19, 2012International Business Machines CorporationPost-anonymous fuzzy comparisons without the use of pre-anonymization variants
US8214497Jan 24, 2007Jul 3, 2012Mcafee, Inc.Multi-dimensional reputation scoring
US8352746Feb 19, 2010Jan 8, 2013International Business Machines CorporationAuthorized anonymous authentication
US8352999Jul 21, 2006Jan 8, 2013Cadence Design Systems, Inc.Method for managing data in a shared computing environment
US8402147Apr 10, 2007Mar 19, 2013Apertio LimitedNomadic subscriber data system
US8417632Mar 15, 2002Apr 9, 2013Verizon Business Global LlcSystems and methods for interfacing with a billing and account management unit
US8452787Dec 27, 2002May 28, 2013International Business Machines CorporationReal time data warehousing
US8549611Jul 19, 2011Oct 1, 2013Mcafee, Inc.Systems and methods for classification of messaging entities
US8561167Jan 24, 2007Oct 15, 2013Mcafee, Inc.Web reputation scoring
US8578051Aug 16, 2010Nov 5, 2013Mcafee, Inc.Reputation based load balancing
US8578480Jun 9, 2006Nov 5, 2013Mcafee, Inc.Systems and methods for identifying potentially malicious messages
US8589503Apr 2, 2009Nov 19, 2013Mcafee, Inc.Prioritizing network traffic
US8606910Dec 15, 2011Dec 10, 2013Mcafee, Inc.Prioritizing network traffic
US8615521Sep 8, 2005Dec 24, 2013International Business Machines CorporationReal time data warehousing
US8620937Jan 13, 2006Dec 31, 2013International Business Machines CorporationReal time data warehousing
US8621559May 1, 2012Dec 31, 2013Mcafee, Inc.Adjusting filter or classification control settings
US8621638May 16, 2011Dec 31, 2013Mcafee, Inc.Systems and methods for classification of messaging entities
US8631495Nov 28, 2011Jan 14, 2014Mcafee, Inc.Systems and methods for message threat management
US8635690Jan 25, 2008Jan 21, 2014Mcafee, Inc.Reputation based message processing
US8660017Mar 15, 2002Feb 25, 2014Verizon Business Global LlcSystems and methods for updating IP communication service attributes using an LDAP
US8762537Jun 4, 2012Jun 24, 2014Mcafee, Inc.Multi-dimensional reputation scoring
US8763114Jan 24, 2007Jun 24, 2014Mcafee, Inc.Detecting image spam
US8782085Apr 10, 2007Jul 15, 2014Apertio LimitedVariant entries in network data repositories
DE10102649B4 *Jan 20, 2001May 24, 2006International Business Machines Corp.System und Verfahren für die Realisierung von Transaktionen mit Unterstützung durch ein Verzeichniszugriffs-LDAP-Protokoll
WO2002075606A1 *Mar 20, 2002Sep 26, 2002Worldcom IncSystems and methods for communicating from an integration platform to a lightweight directory access protocol based database
Classifications
U.S. Classification1/1, 707/E17.01, 707/999.01, 707/999.104
International ClassificationG06F17/30
Cooperative ClassificationY10S707/99945, G06F17/30067
European ClassificationG06F17/30F
Legal Events
DateCodeEventDescription
May 24, 2010SULPSurcharge for late payment
Year of fee payment: 11
May 24, 2010FPAYFee payment
Year of fee payment: 12
Dec 28, 2009REMIMaintenance fee reminder mailed
Dec 21, 2007ASAssignment
Owner name: TERADATA US, INC., OHIO
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:NCR CORPORATION;REEL/FRAME:020540/0786
Effective date: 20070924
Aug 29, 2005FPAYFee payment
Year of fee payment: 8
Jul 10, 2001FPAYFee payment
Year of fee payment: 4
Apr 9, 1996ASAssignment
Owner name: NCR CORPORATION, OHIO
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:AT&T GLOBAL INFORMATION SOLUTIONS COMPANY;REEL/FRAME:008047/0429
Effective date: 19960109